Microsoft Azure Training - [28] Azure Websites - Part 5 - Custom Domains and SSL (Exam 70-533) Video Lecture | Microsoft Azure: A-Z Guide - Database Management

hi everyone this is Shauna smell from
the cloud Ranger and you are viewing the
Microsoft Azure training today is the
part 5 of azure websites and we are
going to discuss as your website's
custom domain and SSL this is something
that's once again not only imported for
your exam but these are the stuff you'll
be doing in production relatively soon
if you are going to deploy as your
websites in Azure ok so let's get
started so let's start with custom
domains what are custom domains why we
need them I'm not gonna get into details
on what a domain is I'm assuming that
you guys already know how the custom
domain is let it be your organization
name like for example Microsoft com
google.com whatever those would be
technically your custom domain names so
based on our previous conversations and
other sessions you know that when you
deploy and as your website what happens
is it will have the name of the website
dot as your website's dotnet so as your
web sites dotnet is sort of that domain
that azure provides you to go to your
website right away after it has been
deployed or it has been created in
reality this is not what you will be
doing in your organization I mean if
your organization is your domain calm or
dark Nate you don't want the users to go
to some domain dot as your web sites
dotnet because as your web sites dotnet
does not identify you right the whole
idea behind the domain is to make it
personal so as your website gives you
that your websites dotnet and this is
not ideal for the production environment
so what you want to do is you want to
tie your current domain if you already
have one and you want to have the
appropriate configurations done so when
people go to your domain name www dot
Cloud Ranger dotnet for example they
will come they will have my blog or my
site based on my personal domain name so
there will be no indication of as your
web sites dotnet even though it's hosted
in Azure as an azure website ok so the
way to do this is that of
you need to have a domain so if you do
not have a domain that go and purchase
one and if you are already working in an
organization chances are they already
have the domain so you won't need to go
purchase what break but what will happen
in the back end is to configure this is
you go and associate your custom domain
name with the public dns where it will
point to your as your website so these
are stuff already that are quite
permanent and quite widely used in
production environment already on
premise this is no different except that
when you are now putting this DNS
entries there are specific ways to do it
and for more or less the entire thing is
almost similar to pointing to your
on-premise server but here you're
pointing it to as yours website ok so I
want to go through one example here is
that how do you put this entries in the
DNS in the public DNS so you can put the
DNS entries for your custom domains on
your public DNS in two ways one is an e
record right so what with an aircard
what will happen is that the name that
you will have for your domain will
resolve to an IP address and this is the
IP address that as your is going to
provide you it's going to say hey if you
were to put this error card in DNS make
sure it points to this IP address and
the two main needs to be verified so
azure does not want you to go and point
your domain to just any as your website
and just call it your own so there are
ways and which as you're just going to
do it's going to verify that if you are
really the true owner of the domain
before you point it right so the domain
needs to be verified it's quite simple
done so this is an example where you're
going to my website dotnet this is an e
record so you so you'll say it's an
error card the domain name is my website
dotnet and this is a random IP address
but this IP address is going to be given
to you by Azure when you actually create
the site so you have to note that and
make sure you go put it in your DNS and
this is a verification so you need a
cname record so these are all the
separate DNS records right so it's a
cname record
which you have to put something like
this so if you created a website called
my website this name has to match all
you have to do is enter this one in your
DNS entry so aw verify do not have any
typos in this one it has to be the way
it is aw where it's like as your website
by the way so a doubly verified dot my
website or whatever the name of the
website you create dot as your website's
name so before this air card works this
is something as your is going to
actually first try and verify and you
should be able to see that from the up
as your portal that you know it has
verified that and it has found out that
you actually you know own the domain
before you can do something like that
okay so technically now when people go
to my website net they will be you know
for it to or they'll be directed to the
as your website that you have created
which is for example my website or as
your websites dotnet so they do not have
to use web as your web sites dotnet
domain any longer so it will look like
it's your site which it is and your your
your organization your customers or
clients will see you as your domain you
so that was the error card of doing it
and ideally this is what you want okay
and then there's other way which is a
cname way it can be done without
verification because you are basically
just forwarding that domain so it it
maps to the again the same name as your
website's not address so all you have to
do is go to your DNS and say hey I want
to create a cname record and there's no
verification so obviously you're not
seeing the second CNM over here you're
just saying that this is my website this
is my custom domain name and I just want
it forwarded to my website dot as your
website start met so this is your
website that's created okay so it's
quite simple I'll go through an entire
example today of how to do this in real
life so you can follow through and do
this in production now I know that the
way we build the sessions is for you to
somehow try to do all this yourself this
might be a little tricky for this
session if you do not have already a
domain so I always had a test domain
that I actually
for every year it's very cheap it's no
more than 12 $30 with most major
providers for 12 or 13 dollars having
your own custom domain it serves a lot
of purposes from a lab work right
because these are the lab works where
you need something that's actually there
for you
so if you do not have a domain name
registered or you know anything like
that then this is going to be a little
hard for you to do but I'm going to go
through an entire example for you to
follow through for the people who are
going to completely do this in a lab
environment have no access to a domain
name do not want to purchase one do not
work in an organization who already will
give you a dev domain name to play with
okay so I'll go through one I'm not
going to get into details on how to set
up DNS and all that that's not the scope
of this if you are working on premise
these are stuff you already should know
Microsoft has a lot of certifications
and everything where you should be
you know quite familiar with how to set
up DNS in public as well as in private
ok the last important thing for exam as
well as production is that you have to
understand that the application plans
that we had the web app plans not all of
them support this custom domain okay so
it's very important to know for your
exams as well is that the free tier does
not support custom domains the free tier
is free okay so they think that you
should be happy with my website or as
your web sites dotnet because even your
going for a free tier you're not yet
super serious or this is something
that's not super important it might be
something personal like a couple of
pages you want to put up and you are
okay with something like my my website
that has a website start dead so the
free tier is the wallet here that does
not have the custom domains and I showed
you how to look into those information
to find out which tiers have what
options that will go through that again
but the shared tier which is usually
almost similar like fear free tier but
the sheer tier you can actually do this
okay and every other standard wants and
premium own so you can do this so this
is important to remember because you
might not have this option if you have a
freight here so let's go to the client
machine
and let's get started alright so I'm in
my subscription and it's a little
different today okay because for this
like I mentioned for this this session
it has to simulate a lot of real-life
production stuff so this is still
something that I'm doing in my lab but
however or a lab subscription or dev
subscription but it has like the
certificates
it has DNS or domain name everything
that are almost simulating how not
almost submitting it is like how
production will be so if you notice the
subscription is a little different from
my usual one this is actually shown at
blue flats dot on microsoft.com it's
blue flux it's a fictitious organization
like you know contoso that Microsoft
uses I use blue flux for some serious
lapse where I'm actually going and doing
something that I'm going to do in
production so this is as close to
production as it's ever going to be and
I'm not using the cloud Ranger one
because I do not have it certificate for
cloud Ranger but for blue flux net
that's the domain name I actually do
have SSL certificate that we are going
to use in the next part of this session
to actually demonstrate this self okay
so I'm going to use this subscription
for today it's a basic subscription once
again it's pay-as-you-go as usual
there's nothing there in the
subscription okay browser everything in
this pour all nothing what's going on
here okay and you are familiar with this
preview portal quite a bit right now
because that's what we have been using
for our websites and that's what we're
going to do today as well so let's go
ahead and create it website first that's
what we want to first do so you can
follow along with me or you can already
do that with an existing one if you have
one or you know let's create one by now
we should be quite familiar with how to
do this so as your web sites dotnet this
is again we're building a basic website
there's nothing too different about this
from what we have already done before so
we'll call this Ranger website read your
website 100 ok and we can see it's
actually available
made your website 100 new plan we'll
just call it Ranger web plan the pricing
here I'm not getting into the details on
this one a little bit but as you can see
it's a standard when it's not a free one
Ranger East to resource group I'm going
to have mine in East it's a
pay-as-you-go as account I know that's
the right subscription is to region I do
not want to be in this district
dartboard let's go do the pricing tier
this is where I was talking about that
you can actually see the details so by
default it really shows the recommended
once on the top over here you want to
view all and when I said the free one
does not support this this is the only
one that's not going to support it it's
free it does not cost you anything to
run this per month but you see basically
it's a shared infrastructure gives you a
gig of storage but that's about it it
doesn't give you anything more shared
one is like the mix of step two the free
one it's very cheap it's like 10 bucks a
month for whatever we are doing to run
right now but look at this this is
almost these two almost false in similar
categories they they almost do not have
but they almost have everything similar
they both cannot do much but with the
shared what you can actually do custom
domains that's the one we want to see so
we are right now using the s-1 standard
and obviously this one can use the
custom domain because I mean you could
go into details over here but you can
actually see anything on top of this can
use custom domains it's pretty given
that you are quite serious if you're
going to use 78 Canadian dollars a month
for your website you are quite serious
so you know they they are all okay with
custom debates on this one as you go up
to premium obviously everybody else has
that so the only one you have to
remember for your exam as well as for
production is that the free tier does
not have it okay no custom domains here
so we are using standard for most of the
things so we will be fine so let's
create this one I will pause the video
and be back once this is created and I
can get to the site okay alrighty looks
like
creation of the website was successful
let's go to browse everything and range
your website 100 is created let's go in
there it's running and this is the
custom domain that Microsoft provides
you right I mean we have seen this
before is the website named dart as your
website's dotnet so let's click on that
and we should see the website that's
created the web app has been created
successfully alright so that's pretty
good but this is exactly what we do not
want we want our custom domain for
example in my session today it could be
www.flu.gov is what I want to see
alright so how do we do that
let's go to all settings it's under
settings and in here you should see
custom domain and SSL option ok so let's
go ahead click on that now it's
important to see this Microsoft actually
does provide you an option to buy
domains and if you click on that you see
that it's I think it's it's hooked up
with GoDaddy I think it gives you an
option right away from in here to buy
the domain if you do not have one I
rather have my control I rather shop
around and find out from a lot of
provider which one is providing a cheap
domain name you know this is if you're
paying more than ten or twelve dollars
for a domain name you're already paying
too much I know there's a lot of places
I can pay about eight Canadian or nine
canadian dollars to buy a domain name in
fact if you buy a lot of hosting plan
from a lot of places they give you a
domain name almost for free but in here
we already we don't need a hosting
because we are doing this integer so go
get a cheap one from somewhere if you
really have to have one and you know
what you know if you're nit
your doing sis admin work sooner or
later you'll need a domain name because
there's a lot of things that require a
domain name especially if you're doing
with public access and things like that
right so it's it's a good investment to
have for a very cheat about so I'm not
gonna buy that today what I want to show
you over here is the managed domains
it's it you know right now the
buying any domain so it's not over here
the important thing I want to show you
over here is that hostname società site
so the only hostname that's assigned to
this site is the one that's provided by
Microsoft Ranger website 100 donors your
website's net I do not have any
certificates there's no SSL binding so
the way you would actually map your
custom domain to this is let's go to
bring external domains bring external
domain so it's an external domain that
you're going to bring it so when you do
this over here what you can see you can
see it's giving you a description of the
custom domains how you do this but
basically it's saying that this is what
you have right now if you wanted to use
the first method we talked about which
was the a records this is the IP address
that you need to put in your DNS Public
DNS so pure that's what we have to
remember so we have to say now which
external domain do you want to bring in
so I'll just say little flux net for
example this is an external domain that
I'm bringing in let's leave everything
alone over here
let's go click on save it's an error
let's look at their face to update
bindings let's see what's going on I
will save this anyways and this is
something I was expecting so let's let's
let's look at this one what is the same
it's saying it the DNS record for blue
flags dotnet that points the ranger
website $100 your website's dotnet could
not be located if you want to configure
a era card you must first create the
cname record with your DNS provider so
basically this is saying that hey for
blue flux dotnet we do not have that
verification process for you to point to
this a to this IP address over here so
you are saying that you're going to
bring in the blue flux net but looks
like you are not the owner of the blue
flux dotnet domain because I have
actually not gone in and put the DNS
entries in the blue flux dotnet public
ns-two say I am the owner by providing
the awr as your website's verify part
blue FlexNet which is fine so I am NOT
going to access my site with blue flags
net so this is what I have this is what
ideally we would have to put in there
aw verified blue flux net cname natively
verify and you put the entire websites
name over here so this is what would
actually verify that blue flux dotnet is
the domain name that I own and Microsoft
would actually allow you to do this okay
the reason Microsoft is not allowing us
to do this is because you know what I
have not gone in putting this DNS entry
there and then of course you know you
can go and put the CDM and how you point
this or you could create an error cord
to do this so the thing that I have done
is that I said that I'm not going to
access the website with blue flux net
I'm going to access the website with
www.bucks.edu I boss people go you would
actually have both these options in
production but I'm just saying that I'm
going to use www to do this so the scene
iam that I'm going to create for
verification is going to be a tableau
verify ok www.flu.gov Arafat my entire
domain name with www and the way you are
going to do that is that this is going
to be a scene in oops this is going to
be a cname and I'm saying the way we are
going to verify this is it's good to be
aw verify the ranger website 100 as your
website ok so that's my verification for
this and if I wanted to create the a
record right now this would be very
simple because I'll just go and put this
IP at
in my a record here right so basically
I'll just go and create that inner car
I'm thinking that you know what I'm
going to use the C name because I'm
going to just do this the easy way and
the way you do that is very simple again
I'm going to say if somebody wants to
come to wwwo flex dot net take them
directly here so these are the only two
entries I'm going to have in my public
dns for the domain name blue FlexNet
okay so how does this work I'm not going
to go flat start knit here I'm going to
do www.flu.gov
and as you could see there was a little
check mark over there which said that
this was fine and the reason for being
that is that I do actually have these
two DNS entries already on my public dns
for blue flags darknet now depending on
who is your DNS provider if you add this
while you're I mean if you're following
through while you're doing this demo it
might not happen right away okay because
some DNS ticks oh I don't know four
hours to propagate and make sure that
the NS entry is there so you might have
to do that and leave it alone and make
sure that you know it's it's working out
you can always do an NS look up and you
can actually see how that works as well
I'm not going to get into details but
give yourself some time for the DNS to
actually take this and absorb this I do
with a provider for DNS who actually
does this in a couple of minutes which
is amazing
Microsoft recently announced already
right now in 2015 is that they are going
to also start providing the DNS for you
so they could be your DNS provider
they're already allowing you to buy that
the domain name and they are also going
to be your DNS host so you could be
doing this in the azure portal you know
and have the DNS hosted by a sure so I'm
not going to get into details because
that's a little bit out of scope but
this is how you're going to put your DNS
in there
okay so after that you're just going to
click on save and you wait for
detoxification so let's go cross this
because it's already saved and as you
can see it already sort of picked up so
come back here you should see over here
now www.bluepmedia.com and everything
you should actually exactly see this
page okay so let's do this dotnet
alright so as you can see now my domain
name completely resolves to this website
okay so that's what I am trying to show
right now that people who are going to
come to your site right now are not
going to come over here and going to see
as your website they were to see your
stuff over here so if you publish
anything or anything on your Porsche
anything on your website the content if
they're still going to be everything the
same but it's just that now they can
come over here and visit the page with a
domain name and that's what ideally you
want let's see if we have everything
over here yep so the hostname assigned
to site is already there and that's all
that is there to it for custom domains
okay blue flux started perfect so if
you're President Assad will be forward
slash whatever so anyways that's all
there is to the custom domain so let's
now go to and discuss the next part of
our series where we're going to talk
about this itself the certificates that
are coming okay so I'm actually going to
leave this open because we are going to
use the same site for the demonstration
so let's go back to the slides all right
let's talk about implementing SSL so by
now you all probably know because this
is stuff that you do on premise as well
is that instant it's quite important to
your websites or you know everything
that we are going towards right now
actually uses a certificate for it
and I'm not gonna get into details on
what a certificate can do for you but
basically in 2015 I'm noticing most of
the search engines being Google they all
are sort of trying to promote sites
which are actually already secure so
rather than HTTP it seems like HTTP is
the way to go and there's no reason you
cannot have your site's HTTPS or secure
or implementing as a cell because it's
pretty cheap I mean it's no longer
something beyond most organizations
means it has become much easier to
implement in every aspect even on iOS or
any other web server you're using in
fact most services at EFS and all that
they are communicating over certificates
and SSL in general so chances are that
if you're building a new website from
the get-go
you probably want to use a HTTPS and not
just HTTP and even if it's a static site
even if well it's rare to have a static
site these days but even if it's not
doing any e-commerce which HTTP was most
commonly utilized for so HTTPS or
implementing SSL is important for as
your websites for similar reasons the
good thing is that out of the boxes so
the support is self support is provided
by default and I'm to show you something
interesting we haven't looked into this
but if you were on the site you're using
HTTP you can see you are already here
right what it means by the support is
there by default is that if you actually
put HTTP s over here and let's say it
enter you'll actually see that it's you
are or insecure site so by default HTTP
is provided for you unlike on ears iis
you'd have to go and have 443 port do
the binding certificate or all that it's
already given the only thing is that the
certificate obviously by default is
using as your website's net so if you
have a little padlock over here if you
click on that and go to view
certificates you will see that there is
a certificate that's used it's a wild
card certificate with asterisks over
here you can see as your website's
darknet so this is provided to you by
default so what happens if
we actually go to our custom domain and
try that I'm assuming that the support
is going to be there as well so let's go
- www-what as you can see it's pointing
to that one if the binding is already in
place the HTTPS should work as well
let's try that actually it is working
I'll tell you why we ended up in this
page in a bit but let's continue to this
website and you can see that website
showed up we are still on HTTPS the
certificate there's a certificate error
and certificate mismatch error actually
and you can see the browser that the bar
over here at this bar over here changes
color to notify you hey something is up
with the certificate so let's look at
what the problem with the certificate is
well the problem is that we are going to
blue flux net but the certificate was
issued to as your website's dotnet right
so basically the browser's say that hey
you are going to some place which is
using a certificate but that does not
match so there something is fishy here
so you need to be careful in what you do
because chances are somebody legitimate
like they might actually try to do this
on purpose
somebody's try to hack you gain your
information so the whole idea about
certification the certificate in behind
is authentication authorization to
understand that who you say is you are
who you say you are and that's verified
by a third-party that's what
certificates do so this is the reason we
have insajder because we are saying that
we are going to go to blue flood Starnet
but we are actually going to somebody
who's using is your website start yet so
the browser by default is supposed to
warning for that so how do you solve
that because in your organization if
you're going to use HTTPS you want to
use your certificate to do this and
that's what this sessions next part of
this part is all about is that we are
going to implement a certificate with
already our custom domain in place okay
so let's go back to our slides this is
what I want to say the first thing you
need to do is you have to obtain an SSL
certificate okay and you can go to many
other many providers the people who
actually provide you with the domain
name
might actually have SSL certificate
option to sell or you can go to one of
those vendors who sell the SSL
Certificates certificate author it is
who sell certificates because this has
got to be a public certificate in your
organization I know for a lot of lab
work you can actually do a self signed
certificate well you say that I know
this certificate but for our purpose
over here I'm going as close to
production as possible so I actually do
have a certificate that I have bought a
wildcard certificate for dual Flags
dotnet your organization chances are
that they already have a well-cut
certificate or this is something that
you might actually need to do to
actually follow along with this I'm
trying to go into details so you
probably do not if you do not have you
might actually need your own certificate
and unlike domain name certificates are
not really cheap especially if it's a
wild cap certificate cost you up to like
I don't know the cheapest I saw was 300
bucks so but follow along with me you
will be able to see what I do with the
certificate so it will be okay for your
exams and if you're following this for
your production work you'll be fine as
well okay so when you go out buy a
certificate it will go and do
verification to find out that hey it's
we we know that you are who you say you
are so it didn't go to a verification
process so even if you go and try to buy
a certificate right now you might not
get it right away depending on the kind
of level of verification they go through
but if you already have a certificate
export the certificate as a personal
information exchange file or the
extension pfx the reason being that the
pfx will actually have the private key
of the certificate integrated in there
okay and you know the PKI public key
infrastructure this is all the
certificate stuffs are about I mean if
you are not already familiar with this
please go ahead and get to a search
engine go through a tutorial to find out
how this entire certificate works but
that's something you have to learn very
very soon
and I'm expecting that you already know
that so anyways download your
certificate with the pfx extension to
ensure that it actually has the private
key and while you are actually ordering
this certificate or whatever you have to
make sure it's a 2048-bit encryption
because as your
supports 2048-bit encryption nor
thousand 24 anymore because computers
are getting powerful the encryptions
need to be stronger and that's why by
default as your out of the box once a
2048-bit encryption so you have to make
sure a certificate is dead after you
have the certificate the certificate
needs to be uploaded to Azure obviously
because you know what as you needs to
have your certificate to actually bind
it and just like I is you bring
uploading to Azure means you're bringing
basically the certificate on the is
server and then you have to do that
binding and the binding will be done on
the website so no more talk here I'm
going to I already have it certificate
downloaded in pfx format for blue flux
net that's why I was using my
subscription today because I will end
this domain name because I already have
a certificate so I will be able to show
you this as closely as possible to the
real production work ok so let's go to
my system and we are going to go back
here and you can see under the custom
domain status a cell right now there is
no there is no certificates it actually
tells you you have no certificates
upload a certificate to get it started
and there's no binding as well so let's
go ahead and upload a certificate and
you can see the option to do that is
right over here and it's all under again
custom domains and SSL okay so let's
upload a certificate and it's a pfx
certificate file you have to absolutely
make sure that it's not a cert file or
little X it's the PF X which actually
has your private key in there so let's
select the file it's going to make make
us browse and I have a certificate
called blue two-door pfx
I'm going to take that file and you can
see that once you did that it uploaded
that file over here so when you download
this certificate usually it will ask you
for a local password to just make sure
that nobody can just get hold of your
certificate and start using it so I did
have a password that I set up it could
be any password that you set up for your
protection and as you can see did check
back over here so the password matched
and I'm going to do a save okay so it's
it's successfully uploaded
even after I click on the save some time
it acts a little weird it says that you
know unsaved will be discarded but I
know it has been saved anyways so now it
ended up putting two of them here
because I just ended up saving that
twice anyways we will just use what and
you can see from here that this is an
Asterix certificate to flux dead it's
the wild card it's gonna expire soon and
that's what we really need and your
certificate is already there so we're
going to do a binding right now and the
way you do the binding is just like a is
binding we are basically saying that
bind this one this is the name and this
name showed up because you know we
already have the domain over here so
that's how it showed up it's asking us
which certificate do you want I know
this is the same certificate I ended up
clicking save twice so it showed up
twice I'll just pick any one you want
and just like I said I I mean just like
a cell type on is it give me two options
as is this an ip-based ssl or it's a SN
i server name indicator I say I'm gonna
go with SN is SL and all I have to do is
click on save and it's very carefully
letting you know that having doing this
will actually have a pricing impact
because it Microsoft will charge you a
little bit for your SSL and the binding
off an SSL certificate to your to your
website directly so we are done with the
binding as you can see www it's saying
that it has a certificate and the type
is SSA SN is SL so since that's done
let's go to we don't need this one let's
go to our blue flux net this is where we
were getting the certificate error as
you can see the certificate error was
because it was pointing to as your
website started so let's wait and
refresh this page and as you can see the
certificate error has disappeared let's
go to the padlock these certificates and
now you can see that star the wildcard
certificate has been issued to this site
and it's issued to the same domain name
that we have it since this match
now the HTTPS is perfectly working okay
this is how you just associate an SSL
certificate to your website so you're
perfectly fine when your users or in
users or clients they coming to your
website didn't know that you are who you
say you are they can trust you and you
know and they know that their
communication is happening over SSL so
it's going to be secure and that's all
there is to this and over here as you
can see the binding is done over here
with the server name indicator similar
to is again you know this is just in a
different way it's presented but it's
all the same way of doing 6 ok so I
guess that's all that is there to this
scenario and let me come over here as
you can see you can come HTTP or you can
come HTTP and people before and you'll
be fine okay the only thing I can think
of actually you know what I'm going to
do this the only thing I can think of is
that how are you going to have to force
your users to HTTPS so for example if I
can go HTTP if the search engine picked
this up as HTTP what's going to happen
how am I going to go to HTTPS this is
probably a common question a lot of
admins have and I'm pretty sure a lot of
you started thinking of different ways
of doing this because it's something
that's it's a legit concern that hey if
my users end up going HTTP how am I
going to prevent them go to HTTP and
make sure they are HTTPS to always be
secure well one way is to take off the
complete HTTP binding on is I'm a nice
to do that take off the HTTP binding and
you know if they come to HTTP it's gonna
be an error so they know it has to be
HTTP or desi there's an issue with their
URL and they'll fix it or you can have
redirects you can have some sort of
redirect that says that hey you know
what if you're going to come to HTTP
this would be a page which will redirect
you to HTTPS or you can do something
with web config I'm going to pause the
video and I'm going to set up something
really quick and I'm going to show you
as a bonus it's this not what will be
part of your examine or anything but for
production this is amazingly helpful so
I'm going to do something of the web
config file when I'm deploying a site
and I'm going
show you how to do this alright so just
give me a moment here alright so I have
everything ready let's deploy a site and
the way we would apply this with a
visual studio so let's fire up the
visual studio real quick and I'm gonna
create a new website and blank website
let's call it I don't know what did we
call our website you could give any name
really but I just want to make sure that
I'm giving I just like keeping it
consistent so we just got literature
website 100 okay it's an empty website
as you can see when you create the
website it already creates the web
config file okay so I'm going to get to
the web config file later what I'm going
to do is I'm going to actually add an
added page the index file existing item
not existing item why did I do that
let's come over here let's go to add new
item and I'm going to say I'm going to
put an HTML file I'm going to call this
default dot HTML okay let's do default
in HTML there should be two pages here
hello this is a secure site perfect
let's see how this looks internally owl
is like doing that to see okay hello
this is a secure site let's close that
browser so we are going to publish this
site right now the way we do that is I'm
going to go over here publish a website
as your web sites I'm actually connected
to my new subscription you're going to
connect it to your one existing websites
that range your web hundred these are
stuff you already know well that
connection they should all be fine the
publish method is going to be a web
deploy I'm hoping this is going to be
working out fine as well
so I'm not making the change right now
I'm just going through the publishing
the website right now to make sure that
make sure that the site is published
okay so let's publish
okay let's refresh this page see hello
this is secure site I do not want this
URL so let's go back to my URL if I
press a fresh-air perfect it's come to
HTTP but this is my site if I go to
HTTPS oops and I go hit on refresh on
HTTPS I'm getting a secure site as well
but look this is the problem if people
actually go to http they're still going
to the same site and it says hello this
is a secure site well this is not a
secure site I want to push them or force
them to actually end up going to HTTPS
so how do I do that
let's come over here I'm going to make a
change to the config file okay I'm going
to add something so in the config file
and this is a copy-paste to stuff that
I'm going to do because I don't want I
don't have the time to actually type
this entire thing feel free to pause the
video and I know try to copy this off
for yourself because it will definitely
help you in the future so let's come
over here I'm gonna add new nodes let's
paste this so what I'm basically doing
over here is I'm putting the system that
web server tag and I'm basically saying
that I want a URL rewrite some of you
might actually totally look at this and
be like I know exactly what's going on
and if you do not completely understand
that that's okay as well all I'm saying
here is do a rewrite if somebody comes
to HTTP redirect them to HTTPS okay so
let's save all of this and what I'm
going to do is I'm going to publish this
site again with a new data okay with the
new web config file I'm going to just
you know do a publish website start
preview what
config file is the modifier that
actually had a change because you know
the HTML file is perfectly fine there's
no change to that so it could update the
web config file so the way it will do
that is it will reapply that and I don't
want this I come over here everything
else is going to be same because the
main page is fine okay so let's close
this tab if we have done this correctly
if I go to HTTP and I go to www.irs.gov
happen this HTTP will actually get
redirected to HTTPS and it will force me
to always go to HTTPS to ensure that it
is always on a secure Channel okay so
let's refresh that now let's try HTTP
actually you know what should have
refreshed that earlier that's that's
making my demo look weird so let's do
definitely flux net did you see that it
actually converted it to HTTPS let's try
that again I show you know what I'm
going to go and delete all my caches and
everything browsing history and all that
so there's nothing in there just to make
it realistic so I don't have to so HTTP
wew honestly there's no cash here okay
in flux top there actually no did not
take the entire cache out I probably
missed something here history yes
history history was not deleted I do not
want that URL to show up at all by
itself HTTP HTTPS completely FTW dark
blue sea blue flux will not show up
perfect there's no history look at this
notice this HTTP okay when I hit enter
it'll actually force to go to HTTPS
there you go
it actually did a redirect and URL
rewrite through that is that if anybody
comes with HTTP it will actually be
forced with the personal to be forced to
go to HTTPS always insuring that
anything that's done on your website is
going to be encrypted
so this is probably the easiest way to
do the redirect through the web.config
this is a lot of leiana's these days
there's the URL rewrite boreal and all
that I just think that this little piece
of code that goes in to the web config
file is the best way to do it at least
so any file or anything that you have
right now doesn't matter where you go if
you have at HTTP leg it will be
converted to HTTPS so this just as a
bonus for production work this piece of
code you will need definitely what do
you need to do is just put that in your
with the config file and you should be
good to go
this is not going to be part of your
exam I highly doubt it but it's
definitely something that's required for
production work ok cool as a bonus so
back to our slides short session we we
talked about as your website custom
domain how as your web sites dotnet is
always there as the domain so you want
your custom domain to actually point to
your ads or web sites in production the
way I did it with blue flux net you have
to ensure that you actually have it
Amane name to start with you have to
make sure that domain is actually hosted
on a public dns a lot of free places to
do this as your has their own DNS
hosting right now you can do it there or
the person in Europe or the or the
organization you're buying the domain
from might actually provide you the DNS
hosting for your website there are two
ways that air records and the cname and
you have to do a verification to show
that you are the domain owner before you
actually attach this to your as your
website so you have to make sure to
verify CNM is there in place and you
wait long enough for that resolve and
make sure you propagates right so those
are the things you need for the domain
to have and once that's done you go
basically and say bring an external
domain anywhere that and you should be
ok with a custom domain pointing to your
as your website then we talked about the
SSL how to implement SSL or secure
browsing through HTTPS by utilizing a
certificate you will have to have a
certificate you could have a certificate
which is a cheap one I have a wildcard
certificate because I use this for a lot
of things your organization might have
wildcard certificate as well already
and if they don't you can use any other
certificate you just have to make sure
that the name the domain name and that
matches and you should be okay and we
showed how to go and do the certificate
at import the certificate and attach it
or bind it to your as your website the
other thing I discuss about is that by
default the HTTP support is already
there so HTTP HTTPS those URLs are both
available so when you do a custom domain
obviously does your website certificate
does not match so you get an error so
you need your personal certificate and
that's what exactly we did in this demo
another bonus feature that I did in this
video is that you want your users even
if they have both HTTP and HTTPS since
you have HTTPS you want people forced to
be you know using the secure channels or
you know go to your secure site which is
using a cell and that's what we did I
had a little piece of code that I put in
the web config file while publishing I
put it in there to ensure that if
somebody goes to HTTP then that URL will
be rewritten and redirected to HTTPS
anyway so that's all there was to this
session as usual the training site is at
www.greatinternetmarketingtraining.com
Grange Abnett or just you know put every
questions in the comments so everybody
else can see and I can see a lot of
people are already doing that and
answering their question I'm pretty sure
a lot of other people get a lot of
benefit from that as well alright thank
you for viewing and I will be seeing you
in the next session